Run mw.html.escape on page extract and title

Add test for XSS attack

Bug: T69180
Change-Id: I213169bd9daed979e63f50cf3926f7196eb6181c
(cherry picked from commit b24e39e9fc4d52cd4ed871a94dfeedb5d923d32b)