On a related note, this probably deserves a proper HTML escaper.