Adding the `escape` param to the `dumps()` function

It will escape the html entities of the whole string returned to the
user.