modify lib/MySmarty.php: $this->escape_html = true;