minor fix for angle brackets

potential bug, fixed just in case xss is possible somehow