Remove < > and replace with proper HTML tags... not sure if there is any
other way to exploit a folder name containing bad characters.