incorporated escape html function