Upgrading the function html_escape()

Escaping twice can be prevented by setting the second argument to FALSE.

See #3201

Not necessary, it will be implicitly cast whenever you call `htmlspecialchars()`.