HTML escape the title and url also