fix bug with HTML double escaping