html_escape(
str) ->escaped
Escape angle brackets in a string for safe HTML embedding
Only < and > are replaced (< and >). This is intentionally
limited to neutralising tags when embedding user-supplied values inside
HTML content or attributes. It is not a general-purpose HTML sanitizer —
&, ", and ' are left untouched.