Do you have to HTML-escape value (e.g. if it has quotes, ampersands, etc)?