Escape html for input value (allows double quotes)