add handler to make html in message safe