No longer escape all characters for HTML. Only amp, lt and gt