Added html string escaping to avoid possible exploits in comments and titles