safe html in editables tray
rely on textContent instead of manually cleaning strs
Merge pull request #1839 from secretrobotron/safe-html

safe html in editables tray