Bump "tested up to" to 3.5
Escape and validate a bunch of attributes

Props Jacek. PS: Looking at this ancient code of mine gave me a
headache. It's so crappy!