Fix: do not use htmlspecialchars in case of predictable and safe strings