Move html safety from event body to bio