Escape titles and dates on their way out of the HTML. It _shouldn't_ be

possible under the current regime to get illegal characters into the database,
but we had one such event, so just do it to be safe; it doesn't harm.
(One might actually also want to fix WebDAV; should be checked, but hey...)