(XSS) Escape double and single quotes in user input