Replace < & > before converting things to HTML. #lol