• Fix doing_it_wrong calls in legacy widgets
  • Escape HTML & outputs