strip html before showing in generic_gui_message for security reasons