Yes, the label names and values really need double HTML escaping in order to end up correctly in the tooltip after two levels of unescaping. Fixes https://github.com/prometheus/prometheus/issues/1563