Remove cases of double escaping

These variables are included in attributes of elements built
with Xml::openElement or Xml:element which escape them using
Sanitizer::encodeAttribute.

Change-Id: Ib34a21a6312ba88b390110115d655b46a64b9dcd