doctor way to escape html5