sanitize. output.
Merge pull request #287 from eve-val/fix-app-xss

sanitize. output.