encodes html entities.
string escape(string v)
unescape("fred, barney, & pebbles") // "fred, barney, & pebbles"