How to Prevent XSS Attacks: Safely Storing HTML Content as Strings in Any Database