Escape html markup in responses received by backend

@maxfliri