escape unsafe content from model attribute
trigger validation on setting attribute