Add query to dashboard based on name not query id

issue #171
it throws error if don't sanitize it. do we have other global method for sanitizing ng-bind-html content ?