Escape <, > and " in all attributes