JENKINS-19279 checkUrl not escaped making job config ui unusable

 if e.g. publish over ssh plugin is installed.  Not sure this is the correct way
to fix it. ( wrapped ${attr.checkUrl} in textarea.jelly with '  )