escape html in reviews and bios