Escape HTML in GLOBAL_ALERT.