Made mail view XSS-save using the safe-html transform for the mail-body display.

Right now the mail view process javascript inside a html mail. This should be avoided, because it could be abused for an XSS attack. 

@maethu @lukasgraf