Ensure HTML entities are encoded