escape attributes and textarea
Merge pull request #3 from pdewouters/master

added escaping function for attributes and textarea