trust more strings as html