Added htmlspecialchars escaping