python clear tag for xss