added xssencoding to display values