this isn't going to fix anything that wouldn't be fixed via ensuring that stuff is escaped already on the page...