Encode user input to not break XML