make some output html safe