Removed UTF-8 forced encoding in variable varule escaping, and replaced htmlentities with htmlspecialchars.

- Multiline bracket notation is no longer allowed for expressions because of
  JavaScript/CSS clashes.
- Variables in expressions can now be preceded by characters unequal to `$',
  which will be prefixed to the variable evaluation.