http_check: don't escape HTML, web UI does this