Option to prevent user of inserting malicious text in the tag

This is possible now :

```
user.update(tag_list: "one, two, <script>alert('hello')</script>")
user.tag_list
# => ["one", "two", "<script>alert('hello')</script>"]
```

Is there any option in the parser to clean the HTML code in the tags?