Bugfix: escaping html to handle XSS attacks