html-escaping introduced into option template via Mustache
Using same templating format for default_url_template as Mustache
Update README.md

Documentation changed to new format for templating
Merge pull request #3 from mmsommer/fix-html-and-js-injection

Fix html and js injection