code: def escape_html(text, escape_quotes=False):
      
      text = text.replace('&', '&amp;')
      text = text.replace('<', '&lt;')
      text = text.replace('>', '&gt;')
      if escape_quotes:
          text = text.replace('"', '&quot;')
          text = text.replace("'", '&#39;')
      return text
docs: Escape all HTML tags, avoiding XSS attacks.
      < => &lt;
      > => &gt;
      & => &amp:
      @param text: text to be escaped from HTML tags
      @param escape_quotes: if True, escape any quote mark to its HTML entity:
                            " => &quot;
                            ' => &#39;