Sanitize HTML entities in the username input field.

ACE-48