rename unsafehtml, add uri