leave use of htmlspecialchars to nanosoap