diff --git a/api.php b/api.php
index f8a590cf..85b282ea 100644
--- a/api.php
+++ b/api.php
@@ -47,6 +47,18 @@
         $data = array_merge($data, getAllQueries());
     }
 
-    foreach ($data as &$d) $d = htmlspecialchars($d);
+    function filterArray(&$a) {
+	    $sanArray = array();
+	    foreach ($a as $k=>$v) {
+	        if (is_array($v)) {
+	            $sanArray[htmlspecialchars($k)] = filterArray($v);
+            } else {
+	            $sanArray[htmlspecialchars($k)] = htmlspecialchars($v);
+            }
+	    }
+	    return $sanArray;
+    }
+    
+    $data = filterArray($data);
     echo json_encode($data);
 ?>