use htmlentity on text in alert box.