Adding escaping to block XSS attacks