escaping or sanitizing HTML in GWT GUI to prevent XSS attacks