Escaped appended text to prevent javascript injection