do not try to html-escape anything but strings; fixes failing unit tests