[This matches `he.escape()`.](https://github.com/mathiasbynens/he/blob/dee897b013a9c81052310f19d079a02c542e3d82/he.js#L27-L43) Yay!