extract djvu text (bug 18046); escape possible script with htmlspecialchars instead...