Escape html during database retrieval