[utils] Escape all HTML entities written in hexadecimal form