Escape HTML in option text.

Account for HTML entities (eg. <script> tags) in option values.