Escaping double quotes and slashes on string attributes