Ticker ID is user input and may contain literally anything. While this is properly escaped in the internal query, we should also escape it in the generated HTML output.
Ticker ID is user input and may contain literally anything. While this is properly escaped in the internal query, we should also escape it in the generated HTML output.