Escape input to help prevent RCE