encode angular brackets as < and > -- it is HTML