update app5 to anti-escape HTML tags