Escape variables in returned attributes