adding djangosecure support to agora
fixing XSS issue in computed html alt attributes