added better support for html injection fix
version bumped