HTML-escape player names and fix placeholder descriptions