validated date, escape html