Removed excessive escaping. The strings have already been run through the OWASP sanitiser