Bug 1067383 - escape html in commit messages

$sanitize returns a html fragment with some tags escaped. to do that it runs a pretty strict parser and will fail in case the string contains malformed html. I don't think it's a good idea to use it since it doesn't do what we  want. ng-bind is the equivalent of $(elem).text("my text"), that means that you cannot pass any html to it. On the other side ng-bind-html does uses $(elem).html("my html fragment"). I don't think any of those do what we need, correct me if I'm wrong. An alternative to the filter I wrote would be to create a temp element, set the string as its text, grab the resulting html and linkify the bug number. I could do that in the body of escapeHtml