Escape everything everywhere

It just so happened that I haven't put any HTML entities in these fields
yet. They still need to be escaped, though.
Let Travis CI use its default install

I think this will fall back to Bundler.