node.js module use to escape html