fixed escape HTML fn
fixed escape HTML fn