Grab exec result just to be careful
Use htmlspecialchars(), a better solution for #2952