Escape html from all sources