(fix) escape the HTML content from the raw source before returning it

UI/MailerUI/UIxMailSourceView.m

@@ -20,6 +20,8 @@
 
 #import <NGObjWeb/WOContext.h>
 #import <NGObjWeb/WOResponse.h>
+#import <NGExtensions/NSString+misc.h>
+
 #import <Foundation/NSString.h>
 #import <SoObjects/Mailer/SOGoMailObject.h>
 
@@ -39,7 +41,7 @@
   response = [self responseWithStatus: 200];
   [response setHeader: @"text/plain; charset=utf-8"
 	    forKey: @"content-type"];
-  [response appendContentString: source];
+  [response appendContentString: [source stringByEscapingHTMLString]];
 
   return response;
 }