SOURCE

console.log(SaferHTML`<p>has sent you a message.</p>`);
function SaferHTML(templateData) {
  let s = templateData[0];
  con.log(s);
  for (let i = 1; i < arguments.length; i++) {
    let arg = String(arguments[i]);
    s += arg.replace(/&/g, "&amp;")
            .replace(/</g, "&lt;")
            .replace(/>/g, "&gt;");
    s += templateData[i];
  }
  return s;
}