data not escaped in certain fields

1. Add User
   Username, Full Name and Email are empty if entered data is "<test" (with less than sign before the word).

Project Groups >> Add project group
Added project group:
Project Group Name : <testing
Project Group Id : <testing
Description : <testing
Local Repository : Default

Results displayed under Project Group
Name: (empty)
Group Id : (empty)
Local Repository : DEFAULT

Parallel Build Queue >> Add
Local Repositories >> Add
Repository Purge Configuration >> Add
Directory Purge Configuration >> Add
Schedules >> add
Installations >> Add
Build Environments >> Add
Build Definition Template >> Available Templates >> Add
Build Environments >> Available Build Definition >> Add
Build Agents >> Add