allowed HTML in error message