added safeUrl service, close #171