public static <T> T htmlInjectionGuard(T toRender) {
    if (toRender instanceof String && Strings.toLowerCase((String)toRender).startsWith("<html>")) {
      //noinspection unchecked
      return (T)("<html>" + Strings.escapeXmlEntities((String)toRender));
    }
    return toRender;
  }
public static <T> T htmlInjectionGuard(T toRender)