Dealing with special characters and xss.