Using CHtml and CHtmlPurifier to prevent XSS