Encode prepaid_shortform input to prevent XSS