Pastable version of making user html input secure