Bug 1021797 - Use bind-unsafe-html for ctas