Update README.md

htmlspecialchars added