less-than and greater-than are correctly escaped