Avoid double-escape for all characters, not just <

[tigt]

Obsoletes #43, fixes the same problem as described in it.

Right now I’m double-checking if this has any side-effects other than & and <, but that weird bug where npm run build doesn’t like being repeated is slowing that down. Pushing this up in case either of y’all have a smarter way of checking.