Update docs on HTML escaping