bug #4719 :  Fix some XSS flaws. The aim is to encode for HTML inputs coming from a user at rendering time.