Escape quote symbol in templates to not allow data values break HTML attributes
Add tests for substitution with normalizer
Merge branch 'lizard/escape-html-attributes' into rc3.0.28