escape html entities
v0.1.1