Display select value without hexcode entities, add escape using JavaScript String rules for fullname/email instead replace single quote, add code to prevent xss attach