avoid confusion regarding carriage return when escaping HTML (especially in textarea)