web commit by http://madduck.myopenid.com/: trace this bug to htmlscrubber and $safe_...