html escaping

added html escaping to the app writing portion