module Rack::Utils

def escape_html(string)

Escape ampersands, brackets and quotes to their HTML/XML entities.
def escape_html(string)
  string.to_s.gsub(ESCAPE_HTML_PATTERN){|c| ESCAPE_HTML[c] }
end