wrap_in_html(): use strbuf_addstr_xml_quoted()