Bug 899070 - wrapTextIntoSafeHTMLString should really return a safe html string. r=asuth