sanitize html from post. #38