This needs to be wrapper in `htmlspecialchars`.