Add HTML escaping to views.py

At least it's less obviously dangerous this way.