Wiki mermaid: entity-encode angle brackets and serve over HTTP, not file://