fix previous introduced bug with html escaping