Force Html encoding on user strings