Escape on* attribute contents. Closes #162