Text escaper for parse_mode
Notes
- A bot token is a password for the bot. Anyone who has it can read messages sent to the bot and post as it. If it leaks, revoke it in BotFather with /revoke.
- Prefer POST with a JSON body in production: URLs end up in logs, browser history and proxies.
- With setWebhook, always set secret_token and check the X-Telegram-Bot-Api-Secret-Token header on every request.
- getUpdates and a webhook cannot be used at the same time. Call deleteWebhook before long polling.
Next step: the Telegram bot guide.