You can re-use the `encodeForHTML` function. It's also not necessary to create a new variable for this.

```
// Sanitize the input
input = encodeForHTML(input);
```