input escaped

also all output is converted to html-friendly format.