Apostrophes are not handled correctly in invalid card names

[KingSupernova31]

If the user enters an unrecognized card name, any apostrophes will be rendered as their HTML code of "'". (The "single right quote" character that some sites use is rendered properly.)

[Nightfirecat]

This line just needs to have its .replace(/'/g, ''') removed. Thinking about it, it'd probably be safe to remove everything except the replacements for <, > and &... The replacements for ' and " may not be needed.