Text is now HTML escaped before being pushed onto the DOM.

This fixes issue #30.