Properly escape HTML attribute values
Test cases [ci skip]
Unit tests
Merge pull request #1216 from sjinks/xss

Fix XSS issues in Phalcon\Forms\Element and Phalcon\Tag