FIXME about bad HTML escaping!!!