protect against XSS injection attacks
Merge pull request #6 from tonypeng/feature/philter_xss

protect against XSS injection attacks