code: function _escapeHtml (input) {
    return String(input)
     .replace(/&/g, '&amp;')
     .replace(/</g, '&lt;')
     .replace(/>/g, '&gt;')
     .replace(/"/g, '&quot;')
     .replace(/'/g, '&#039;');
   }
docs: "private" helper for ensuring html entities are properly escaped