encode html-entities in notification messages