Missing html escaping in addresses (Closes #1135)