Fix escaping of characters in substitution variables, fixes #17286.
Also use ""+ rather than toString() to allow for null values.
Click target must be .dijitTreeRow (or descendant).
Fixes #17303, refs #14896.