fixed: quote marks in regex validation error msg were not being htmlspecialchar\d