BUGFIX: Escape values substituted into HTML and attributes.