Escape ampersands in HTML attributes

Bugtracker
http://www.concrete5.org/developers/bugs/5-6-0-2/some-html-errors-should-be-fixed/