Escape all sensitive strings in rendered HTML