Using esc_attr() on get_the_title when used as the title attribute. h/t @mjangda