LPD-63827 Escape title

Author: ak-ragnor

portal-impl/src/com/liferay/portal/servlet/GoogleGadgetServlet.java

@@ -100,7 +100,7 @@ protected String getContent(HttpServletRequest httpServletRequest)
 		sb.append("<?xml version=\"1.0\" encoding=\"UTF-8\"?>");
 		sb.append("<Module>");
 		sb.append("<ModulePrefs title=\"");
-		sb.append(title);
+		sb.append(HtmlUtil.escapeAttribute(title));
 		sb.append("\"/>");
 		sb.append("<Content type=\"html\">");
 		sb.append("<![CDATA[");