The descriptor/store API endpoint should deny offending characters in title attribute

Current Situtation 

The descriptor/store API does not check the value of the title property. This results in entries like <h1>title</h1> being accepted which can be considered code injection.

Desired Behavior

The descriptor/store API should check the value of the title property and reject the quest if the value contains offending characters such as HTML tags.