docs: escape special html chars