Escape special chars in product name and model

As this is passed more or less directly to the HTML-Form in the view, having special chars in the product name could prevent correct data from being send