pay attention to safe html being disabled