Fix/html injection