Use correct HTML escaping