Fixes HTML injection exploit with blueprints

~~No issue number.~~
Fixes #6030