add escapeEntities option

Could we add something like `<a href=​"http:​/​/​example.com?hello=1&world=2">​</a>​` here so that we're also testing that this applies to attribute values as well?