Fixed issue #08566: Stored XSS in HTML export
Dev: encode all answer directly
Dev: Is IP spoofing is really a bug ...