2.06

- code cleaned
- escaped untrusted data in href,src,alt,title etc etc attributes