We shouldn't escape here -- window.title doesn't need it, so you'll wind up seeing the raw entity codes.