working on html escape ... again