fixes #2105

Also fix bug where sources were not escaped at all on post versions page