changed to bootstrap-wysihtml5 .. no more xss but editor doesnt grow