html decode is removed

there was a bug... where it was decoding the html chars which is a
potential threat so removed it