made $.append(), $.appendTo(), $.html() calls more secure