added html escaping