Escape attribute values.