escape HTML before inserting it into autosize container
bump to 0.4.0