[add] HTML Purifier added to clean code
[fix] content is now cleaned by HTML purifier from prevent XSS attack