bozo_escape_html
file = bozo_escape_html(NULL, request->hr_file);
user_escaped = bozo_escape_html(NULL, request->hr_user);
char *bozo_escape_html(bozohttpd_t *httpd, const char *url);
if ((p = bozo_escape_html(httpd, printname)) != NULL) {
htmlname = bozo_escape_html(httpd, name);