Properly escape HTML attribute values
Test cases [ci skip]
Unit tests
Merge pull request #1216 from sjinks/xss

Fix XSS issues in Phalcon\Forms\Element and Phalcon\Tag
Merge remote-tracking branch 'phalcon/1.3.0' into bug_1214
use zval_dtor