escape html from api before passing to datatables