fixed widget rendering safe HTML