use $.text() instead of $.html() to prevent js execution and other stuff
0.2.3