escapeHTML had exchanged < and >.