Aaaaand yet another botched htmlspecialchars() call fixed

Change-Id: I2f9b1650376e4bb73c0bb5a43205392ee0efda10