use HTML encoding on JSON return strings ... starting with the GSON implementation
2 files changed