encode email in Formatter

avoid XSS with emails in format  "Carsten Brandt <mail@cebe.cc>"