Escape xml entities