Bug 899070 - wrapTextIntoSafeHTMLString should really return a safe html string r=asuth