WordPress, use esc_html_e() instead of _e()

For maximum security, use esc_html_e() instead of _e() (and esc_html__()/__()), to ensure any unwanted HTML snuck into a translation file is neutralised.
For strings that have HTML in them, use wp_…

Similar