binding in text compile to text binding, not html to prevent XSS