[BUGFIX] htmlspecialchars on menu entries

Menu entries are not passed through htmlspecialchars. This cause some W3C validation issues.