pub fn escape_html(text: &str) -> String
text safe both as HTML text content and inside a quoted attribute value.
text