Properly escape strings in XML attributes

String refernces are localized and defined as element text bodys.
XMLTranslator inlines these values into binary XMLs (e.g. the manifest) as
attributes. This may result in malformed XML, e.g.:
  <application name="Hello & Goodbye" />
This commit will use Apache Commons Lang3 to properly escape attribute
stirngs.