htmlEscape function

Escape HTML entities