change back to use html for shadow, but escape all chars
0.2.5