#html entity #character escaping #prevent parsing #less than sign #html tags #web security #code display