Fix unescaped user input in views