fix: escapes ' to &#39; not to &apos;