Added character escaping and input sanitization
Merge remote-tracking branch 'origin/escaping_sanitization' into browser_tests_merged
merging in Ryan's actual work instead of just ignoring it