Escaping everything by default to avoid XSS attacks. that's a nice feature to have.