Escape HTML in option text.

Account for HTML entities (eg. <script> tags) in option values.

Test case:
https://gist.github.com/ghedsouza/7663746