esc_attr instead of esc_url for textarea placeholder

Closes #4195