Escaping user-controlled data in templates
More user data escaping
Merge pull request #799 from stenington/sanitize

[WIP] Sanitize user data