Add htmlspecialchars in profile preferences