nitlight: Skip `nitg-g` tests.

NitLight is too big for `--global`.

Signed-off-by: Jean-Christophe Beaupré <jcbrinfo@users.noreply.github.com>
string: Escape all HTML’s metacharacters.

In `html_escape`, escape all characters that OWASP recommends to escape.

Signed-off-by: Jean-Christophe Beaupré <jcbrinfo@users.noreply.github.com>
nitdoc: Escape URLs.

Signed-off-by: Jean-Christophe Beaupré <jcbrinfo@users.noreply.github.com>
nitdoc: Escape headers.

Signed-off-by: Jean-Christophe Beaupré <jcbrinfo@users.noreply.github.com>
nitdoc: Escape attributes.

Signed-off-by: Jean-Christophe Beaupré <jcbrinfo@users.noreply.github.com>