Escape html entities when rendering the value of text and textarea controls