Escape HTML extracted from the listing to guard against injection attacks.