Added sanitation to the injected html