Escape all flash messages to prevent XSS attacks