Make sure XMLGenerator uses quoteattr() instead of escape() to quote

attribute values.  Just using escape() can (and always has) led to broken
XML being generated.  This makes sure it always produces the right thing.

This actually closes SF bug #440351.