fixed usage of the html_attr escaping strategy to avoid double-escaping with the html strategy