htmlspecialchars() instead of stupid whitelist
datatables!
datatables!
datatables!