Unit test for HTML escaping