to do demo bug

Hi, just came across your project, looks interesting!

**Test case:** https://codepen.io/cferdinandi/pen/wvmoPMg

Your to do app seems buggy because there's no escaping of the data. Eg if I enter `" oops` as a to do item name and hit Enter, it's added but clicking Edit generates invalid html ,and the input field is blank.

Start by reproducing the report in the linked CodePen test case with a to-do item containing a quote, then inspect the demo's edit path and how item data is inserted into the generated HTML. Done means quoted item names produce valid HTML, the Edit action opens correctly, and the existing item value appears in the input.

Written by the indexing model from the issue text.