escape TD titles

A few urls left that I failed to apply HTML escaping.