Prevent undesirable html code injection