html escaping to prior commit (code reviewer lapse :) )