I don't think html escaping is needed, since pasties go through the colorizer first. I don't really like the workaround to not call on_send() when I don't want the html output, it's a bit omg what's going on there... I'll have to rewrite that bit.