dart: Escape HTML in todo rendering