better HTML double-escape