escapes meta title/description

closes #2663
adds unit-test