HTML-escape bare angle brackets