We're using htmlspecialchars() on the value in the previous list.php