you said the html string is correct (with escaped quotes) so this sounds like a constraint of the ServiceNow API that it doesn't like certain characters