beebole [master] convert <> to &lt &gt to mitigate XSS code injection