Sony sanitize bootstrap data

Does an escape/unescape around the bootstrapping process to prevent XSS.
https://github.com/theSmaw/Caja-HTML-Sanitizer