Use DOM API to escape output