ITOSOPS-1589: Updated runs.php

added htmlspecialchars to remove XSS vulnerability