add something like this in a new test

`
    expect($message.render({text: '<script>alert("xss");</script>'}).html()).toEqual('<script>alert("xss");</script>');
`

we need to do the insertion using .text() to prevent this

however, we also want a test that says something like this:

`
    expect($message.render({text: $name}).children()[0]).toEqual($name[0]]);
`

so we have to detect when it's time to do dom node insertion, via .html()