.text() already escapes special characters