Added comment
Escape strings coming from user (XSS)