preserve html securely, remove strange ASCII, fixes #6533