Greeting message shows raw HTML if I use an apostrophe

My greeting is "Hi! We're online" and the widget renders it as We're online with the entity visible. Looks broken to visitors. Please decode the greeting text properly.