[BUGFIX] Pass menu entries through htmlspecialchars

Menu entries are not passed through htmlspecialchars. This cause some W3C validation issues.