Update nl2br helper

I've added a line to escape the source text within the nl2br helper to prevent possible security vulnerabilities (XSS etc.).