Escape HTML entities

js
var escape = require('escape-html');
escape(str);