make content html safe