added htmlspecialchars to commit loading