Don't allow open-ended tags to pass through xss_clean()

This was a regression caused by the previous commit
2 files changed