Fix HTML rendering: escape special characters

Closes issue #4.