Autoescaping and proper string handling