escapeHtml for sample code