Escape attribute values, fixes #102