unescape html entities, it's safe.