Removed as much html calls as possible.

Commented remaining calls...
Added `TODO: SCRUB` everywhere .html() input should be scrubbed.
Whoops, forgot to checkin this file
Update quickhelp.js

Literal = safe
Update codecell.js

Literal = safe
Update textcell.js

.html() returns are safe.