[FIX] correctly htmlescape data in format_cell