allowing html data