fix unescaped html

Resolves #860