Escape tags as content is comming from user

<script> make js fail