username with ' breaks user mention in reply box

We use single quote to wrap attribute value, :(

Change-Id: I5ce8f17028344cb013bd0b2c29b5c0dbc155a234
Merge "username with ' breaks user mention in reply box"