navbar features and security

Secured navbar from xss. Whitelisted tags. Included iframe/sandbox
regex. Added upload off switch.