Don't use innerHTML for result strings, use proper text nodes to ensure correct HTML entity encoding. Fixes #19.