html escape feed item's title, see #7
html escape feed item's links too, fixes #7