Puts escaping inside highlight()

Details:
* Escaping & and < is now inside highlight() for convenience.