Only escape "<", ">" and "&" as HTML entities