escaping and sanitizing input for custom widget form fields

escaping and sanitizing input for custom widget form fields