Add html escaping to every static "target" tag  even if no params are present (excluding plain text email templates).
Remove cfg tag html escaping in plain text mailconfirm template.