Escape messages, to not allow HTML