HTML entity encoder

Escape & < > " ' or decode common entities.