Encode &, <, > and optional quotes for safe HTML output. Automatic submit runs on each keystroke and paste.