Function to escape Cross-site scriptings