Ensure values incoming are escaped to protect against XSS