test html escaping