some util functions
escaping html