escaping of quotes in generated HTML

I think that the quotes within the generated HTML are not correctly escaped.