fixed html escape bug