Use explicit version as per ruby coding standards
Sanitise HTML output

Strip <script/> elements, etc.