Use the $render which we got passed.

Or use `htmlspecialchars($text, ENT_QUOTES, 'UTF-8')` directly?