fixes #914

adding htmlentities in case anyone uses this unstable version on a
public server