FIX bug in featurectrl when dealing with untrusted html.