code: function(input) {
              return (""+input).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;').replace(/'/g, '&#39;');
          }
docs: Returns a string with HTML entities escaped.
  NOTE: IE will not interpret ""&apos;", opting to just render it encoded
  we use the alternate decimal version instead