fix HTML double-escaping