<p>this should be <em>escaped</em> & so should &39;this&39;</p>