Patch form filtering, html encoding