added escape character for "<" to not allow html coding