Escapes every attribute and text output in views to prevent XSS