Escape static & dynamic attribute vals. Tests pass