VID-1915 Fix XSS vulnerability

Added escaping for the 'alt' collected by the method returning $attribs (see below)