added sanitization using wp_kses