Escape HTML to accept any char