html escape explanation, present in a div