escape html on file content