refactor bo-html to be safe if and only if ngSanitize is included