Option to prevent user of inserting malicious text in the tag

[fguillen]

This is possible now :

user.update(tag_list: "one, two, <script>alert('hello')</script>")
user.tag_list
# => ["one", "two", "<script>alert('hello')</script>"]

Is there any option in the parser to clean the HTML code in the tags?