How to prevent users from including unwanted content in a text box