Add HTML escaping for events when not using ace