Per cd85e090f3 all content was escaped, however we should only do that when displaying the value in browser or exporting to file format which supports HTML.