web: fix client HTML escaping
web: 0.0.10