escape HTML from individual reports