htmlentities in header