safe html bug