Fixed html entites for preventing XSS attacks