Escape all the things.
Use Message.at rather than Message.time (which DNE)
Merge pull request #2 from parkr/escape-dat-data

Escape all the things.