another missed htmlspecialchars conversion

References s9y/Serendipity#236