add HTML escape refs #1439