Make a function that checks for special characters and replaces them with HTML friendly equivalents, before you write it out to the page.