Add XSS attack description to html_escape