feat(popupdoc): Escape unsafe variables {title, descr, tconfirm} in popupdoc() (refs #4914)

No need to escape tconfirm's quotes with "&rsquo;" as the escaping is
now handled in popupdoc().