Adding additional escaping and unit tests

Hey Ray,  

I noticed your extension was only escaping < and >.  It needed more for proper HTML escaping.  I know you only needed it to work for Prism.js, but if anyone wants to use it for other stuff, they'll need additional support. 

I also added QUnit tests.