filter for unsafe html (angular)