[shared/form] unsafe html in label