allow only text to be processed and deny text from form element