Fix issue with non-html safe strings in upload page