added htmlspecialchars to the build widget page