fix html escape