Properly quote attribute values