Fixes HTML injection exploit with blueprints

No issue number.
Is this needed? You can't get HTML into item names without adminfuckery.