Escape HTML input in Iframe Sample App

:koala:

Escape HTML input in Iframe Sample App

/cc @zendesk/quokka

### Risks
 - None