bug fixes in HTML escaping and URL escaping