Prevent XSS by escaping input.