add function escapeHTML for preventing add custom row attribute with double quote