Fix htmlspecialchars() call

Change-Id: Ia2ec0950075b1bc1bb2f26ee239a12e701f6da8a