CE-1162 Sanitize HTML output