prevent Cross-site scrypting on submit