LPS-43171

This is the code's logic.

When a String is used in javascript and id, I convert it to a 'word' String;
When the String is used in html id or other attribute I convert it;
When the String is used in liferay taglib attribute, I don't escape/convert it at where it calls, but escape/convert it in the taglib itself in order to prevent over escape/convert problem;
HtmlUtil is called in the jsp, but not in the XXTag.java

So I fixed the related taglib and fixed some misused escape.