Escape HTML input.