the eh() function po is already escaping the output with htmlspecialchars()