Implements view encoder against XSS and adds it to the demo application and the client html test view helper
Escapes every attribute and text output in views to prevent XSS