HTML code is now converted to normal text to prevent client side scripting.