Updated to 1.2.1

Prevented XSS by escaping html characters.