Fixes HTML injection exploit with blueprints

No issue number.
idk, I didn't test this. I just figured this should be unsafe too.