fixed: angular ng bind unsafe