stop escaping CDATA; fix GET return