&, < and > are now escaped properly.