hot fix for html injection, well not that hot... :)