Escape HTML chars in types

closes #61

- escaping code is taken from handlebars utils
See: https://github.com/wycats/handlebars.js/blob/49fcf10de21b89c504d641e72ce6c31c2feaed8f/lib/handlebars/utils.js