This needs HTML escaping.