fix xss issue by using Safehtmlutil