Removed htmlspecialchars from input
Added htmlspecialchars to output