Bug 883616 - Bug 882607 resolution introduced a XSS vulnerability r=gnarf

Carefully escape the body before injecting it into the document
Added some tests to ensure this for both SMS and MMS.