Added basic HTML character escaping