escape values at the time they are output to pass WordPress.com scripts
Merge pull request #509 from niallkennedy/settings-escape

escape values at the time they are output to pass WordPress.com scripts