prevent html escape and undefined name