Escape HTML in custom poof messages.
Merge pull request #70 from jd4564/master

Escape HTML in custom poof messages.