Attributes and text not escaped in buildHtml (ssr) 🐛
**Describe the bug** 🐛
There is a difference between the rendering in spa and what ssr produce using buildHtml, in the ssr case html code can be injected both in attributes and in text strings.

**To Reproduce** 👨‍🔬
```nim

import ../src/happyx

appRoutes("app"):
  "/":
    tDiv(class="hello\" style=\"color:green"):
      "hello <b>world</b>"
```
escapes the quotes in the class attribute when run as a spa. The html produced is
```html
<div class="hello&quot; style=&quot;color:green">hello &lt;b&gt;world&lt;/b&gt;</div>
```

For ssr:
```nim
import
  ../src/happyx

serve("127.0.0.1", 5000):
  get "/":
    buildHtml:
      tDiv(class="hello\" style=\"color:green"):
        "hello <b>world</b>"
```
does not escape the `class` attribute or the `<b>` in the text and gives
```html
<div class="hello" style="color:green">
hello <b>world</b>
</div>
```

**Expected behavior** 🤔
I would expect the behavior of the spa where the attributes and the text strings are escaped.