Yes, you have it correct. From my interpretation of the javadoc, it sounds like you should be able to leave escapeHTML false as long as the tags are escaped,...