fix html escape in textarea