add html escaping to parseString for patterns using double-mustache - triple-mustaches are not escaped