now escapes HTML but converts [this] into a link to /view/this