UI changes and html escaping.

Also added a sanity check in dbvsprintf function, in case a developer adds quotes for strings on his own.