I have read about angular's way of escaping everything by default and $sce, so I white-list data w