Escape characters from raw xml data going into the text box so that the…

Escape characters from raw xml data going into the text box so that the round-trip doesn't get rid of neccessary xml escaping

cms/templates/widgets/raw-edit.html

@@ -33,7 +33,7 @@
     </section>
   </section>
 
-  <textarea name="" class="edit-box" rows="8" cols="40">${data}</textarea>
+  <textarea name="" class="edit-box" rows="8" cols="40">${data | h}</textarea>
   <pre class="preview">${data | h}</pre>
 
   <div class="actions wip">