Adds XSS protection for user input