views: Reuse the util.markup function
util: Escape raw HTML

We don't want random users to write whatever HTML in comments.
tests: Ensure markdown escapes raw HTML
Merge pull request #53 from bochecha/nohtml

Make sure markdown doesn't allow users to insert arbitrary html