Add helper method for escaping presentation attributes
Strip tags from messages in title attributes
Some things weren't being escaped