escape html on show page.