Improve XML/HTML entity escaping
Merge pull request #1 from mathiasbynens/master

Use `he` for HTML entity escaping