Automatically xss escape with left dog (<%@)