Security fix. Html templates did not escape apostrophes properly ('). (ra)