don't escape < in attributes