Fix XSS on helpers/html.php