Correctly escape html, hopefully this will fix #6