Escape html

escape various strings when added to html.