Escape data before putting it into markup