Escape HTML entities on the UI layer

Closes #173