Widgets

Fix up sanitization and escaping