Hardening/619 escaped output

### Description
The responses now HTML-encode the values and an attempt has been made to avoid responding with text not controlled by ourselves. Also, bad paths etc have been removed from the responses.
Yes, now this PR has been 'transformed' into a 'real PR' ...