Escape XML entity in output