HTML escape description to prevent code injection onto page

Benjamin Mako Hill || Want to submit a patch?