Escape HTML entities in deploys alerts (else this would cause an XSS vulnerability)

To test the vulnerability, create a deploy and put this line into the def file:
# Alert: "/><script type="text/javascript">alert('This is an exploit test');</script><a x="
This will cause the frontend to display a javascript alert "This is an exploit test"