escape topic title and category name
closes #2520
closes #2519
Merge remote-tracking branch 'origin/master' into socket.io1.x