web: security, use pre instead of p, as later is unreadable