html-escape messages to show them as they should be shown