Adjust permitted directives (ref gh-95).
Fix incorrect HTML escaping (close gh-98).