don't html escape double quotes, more trouble than it's worth