Secure HTML escaping