Escaping HTML.
Merge pull request #4 from nealpoole/security-fixes

Add HTML Escaping