entity reference escape