escaping html if possible