Set charset="utf-8" in html

This is a best practice to avoid a potential XSS