Strip any unescaped double-quotes from output

Fixes https://github.com/punkave/sanitize-html/issues/19 (in theory)