fix the HTML escaping bug