escape attributes & text content in fake XMLDOM