Proper HTML escaping.