rustdoc: escape shown input to prevent injection