Prevented XSS injections on output for poll name by escaping html chars