add ; to the end of function escapeHTML