Escape HTML chars

I haven't tested this but it should work and it gives you the idea.