Escape html entities for form values.