Escape content and attribute strings.

[thvitt]

The implementation uses Python's built-in escaping to escape characters in text content. For attributes, it will also escape quotes if there is no way to express the attribute without escaping by sensibly choosing the outer quotes.

Fixes #5