cgi.escape called, some styling done