html in static text, sanitize included, url property is external now