Fixed $sanitizing so that XSS attack are not possible

Fixes the problems discussed in issue #62

This pull request has 3 parts:
First, the value was never assigned to the returned sanitized value, so that part is fixed
Second, there was a small hole in $oldViewValue, iff bad code was loaded, and contained invalid HTML
Third, $formatters as well as $parsers need to be sanitized

Thanks!