fix(escape html) escape html for content we do not control
fix(escape html) escape html after characters filter
Merge pull request #171 from lithiumtech/fix/NOW-525

fix(escape html) escape html for content we do not control