Comment 3 for bug 1520011

In some places, eg feedback on a page, the message for the email is saved in the db all escaped so
& = &
" = "
etc

But when we go to display it we escape it again so

& = &
" = &quotquot;

We need to unescape the string before re-escaping and displaying it to avoid double escape