bugfix: make regex for html safe more greedy