card text is html so no need to escape it.