IDEX-377 add SafeHtml to avoid XSS vulnerabilities

Used SafeHtmlUtils for escaping unsafe html