added htmlpurifier module, Security/XSS