added html escaping to last commit