Escape HTML to ensure correct validation