HTML escaping

This PR solves some basic issues with the editing forms.

If you choose the textarea widget for a field, and fill it with HTML (including the tag `</textarea>`) things break pretty quickly. If you choose the text widget (or let it default to this) for a field, and fill it with a string (including a "), well, it breaks again.

This PR solves those issues.