Fix XSS issues in Phalcon\Forms\Element and Phalcon\Tag