fixed again: .text() already escapes special characters