style
fixed escaping for html... we trust it