Escape HTML for index drop confirmation message