Escape HTML with escape-html