Some more escaping for dynamic html content that might contain user controlled strings