#87 Escape HTML in message