Added escapeHTML()