Secure HTML escape. Closes #349