Escape attribute values passed to SetItemAttribute

Fixes #29