XSS Fix

Fixes for a possible XSS attack.  Uses escapeHTML to get rid of some potential badness with last_answer