Fix escape_once filter

Solves #283 

We don't want to add actionpack dependency. So i've just replicated its `#escape_once` implementation. I'd say this is good enough? We could also just remove the filter otherwise.

@fw42 @arthurnn what do you think?