encode literal angle brackets for HTML