Add proper escaping for <, >, and & characters