Hardening/619 escaped output

### Description
The responses now HTML-encode the values and an attempt has been made to avoid responding with text not controlled by ourselves. Also, bad paths etc have been removed from the responses.
Would "the real PR" be this PR itself? I understood that after our skype conversation this afternoon...