Escaping quotes in form attrributes