handle escaping characters like < and > in CSV

only affects the demo page