strip HTML correctly and mask quotes