Package htmlwriter provides a io.Writer that escapes only five characters: <, >, &, ' and ".