Ensure all input is escaped