Add html escape to inline model attribute
Add html escape to inline model attribute

This was getting caught in Brakeman report.

alphagov/whitehall,alphagov/whitehall,alphagov/whitehall,alphagov/whitehall