Fix #170; escape html in ingredients and notes sections