Add some tests
Add more tests
Don't escape HTML entities

WordPress already escapes things, so don't do it again.