Escape whitelisted query parameters

- Query params are not escaped, so if quotes are present in the params, the output resembles: `<link href="http://www.mywebstore.com/our_resources/?page=5&keywords="here be dragons"" rel="canonical" />` (breaks the HTML)
- Escaping the params produces: `<link href="http://www.mywebstore.com/our_resources/?page=5&keywords=%22here+be+dragons%22" rel="canonical" />`
- Added a test to ensure query params are escaped

Shoot any questions my way. Cheers!