escapeHtml to StringHelper
fixed concurrent issues partly

saveAsync gets unsafe as soon as the data object is modified while it's
being queued.