Prevented a potential XSS vector in exception handling (affects some browsers).

All exception messages will now be HTML-escaped within the serialized body.
Added v0.11.1 release notes.
Bumped to v0.11.1!