xss thereat in admin log

just added htmlentities() to filter the admin log