html safe notifications

[finishes #78689500]