[client][servers][users] Escape HTML