SOCIAL-3055: client side filter xss in tags control