[#6889] use .text() instead of .html() to avoid html insertion of end-user input
Update doc links