don't bother with htmlspecialchars(), just use normal textarea encoding and prepare

* Fixes #335
* Jenkins: http://jenkins.buttonweavers.com:8080/job/buttonmen-cgolubi1/109/
* Tricked you, this one actually doesn't have any weird secondary merge dependencies, you can merge it on top of master