[fix] harden attribute escaping during ssr#7530

dummdidumm merged 3 commits intosveltejs:mastersveltejs/svelte:masterfrom

mrkishi:xss-vulnmrkishi/svelte:xss-vulnCopy head branch name to clipboard