Added proper escaping in achievement widget for hardened security