Escape HTML properly (htmlspecialchars)

Protect against accidental or malicious HTML injection

Signed-off-by: Dan Scott <dscott@laurentian.ca>