fix: Escape html tags before substituting strings

[YoganshSharma]

Fixes #29

[dhruv8sh]

Thank you so much for the PR, though I think there are some things to consider:

1. Most people would never encounter this issue, thus it went unnoticed so far thus it should be optional.

2. This also brings up the issue of escaping '%a', '%q'...

3. I don't want to shove this many string replacements down people's throats just for an applet that displays text, a lot of people run low spec devices and switching a window is a heavy enough task for them. There must be a better way to rewrite the sub function. These incremental performance benefits later add up, resulting in a better desktop experience.

[dhruv8sh]

I swear it's not this: https://youtube.com/shorts/4OoqBk3nhyY?si=589laUt_dlw8ZBgj

I promise