sanitize user input for xss attacks

[camallen]

Reject any malicious content submitted to the API that can be exploited in front ends. Specifically external and social URL values and look at other model attributes that could contain vectors for exploits.

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.