Escape or don't escape HTML chars