Escape html from pull request titles
Merge pull request #16 from alphagov/escape-html

Fix against <marquee><h1> injection