Escape smiley character codes

Smiley character codes were being placed into alt and title attributes
without being escaped, now fixed with htmlspecialchars

Change-Id: I12aa6107be1aab6d18b1c348d0ec7cfbc0619983