_s: Escape URLs in image.php

Escape URLs generated by wp_get_attachment_url(), get_permalink(), and get_trackback_url().