htmlspecialchars()

[michael-vostrikov]

Hello. Good grid, but what about security? I cannot find any htmlspecialchars() call in source code, and test script <script>alert(1)</script> in database data works good.