Avoid html injection.