add double quote in html tag when using variable for safety