Run mw.html.escape on page extract and title

Add tests for XSS attack

Bug: T69180
Change-Id: I0c423b1046257a0ddacec1315bafcbf1f94b9958
(cherry picked from commit a98b009b49e5dc8af56898b68cf009678722a40b)