Yep, I gave it a spin and escapeHTML() seem to do the trick. I'll update the pull request.