fixed plot html sanitization.