Escapes HTML to fight dirty business