test the full HTML escape matrix