Write a proper html escaping function