Escape attribute values
Proper escaping of attributes