Upgrading the function html_escape()

Escaping twice can be prevented by setting the second argument to FALSE.

See #3201

It'd be enough if you just describe the params list below.