Always escape user provided data in mainmenu fields