fn escape_html(s: &str) -> String