Manual free-text sanitisation

https://www.pivotaltracker.com/n/projects/887836/stories/74137504

This PR add validation that free-text fields in manuals don't contain dangerous HTML tags.
I figured that it needed to go somewhere shared, because the `Section` class (that will be needed for section free-text field validation) will reuse it as well.