Properly escape HTML input in tile template. Fixes #169.