- prevent x-site scripting when pasting preview html
- fixed the width of the preview panel
- improved the url generation for fetching the preview