Escape a String for literal inclusion in HTML.