[SECURITY] Prevent XSS in ContentObjectRenderer

Properly escape various parameters.

Resolves: #31244
Releases: master, 7.6, 6.2
Security-Commit: 1efa6adc7b1d332c384779451626e34059e30d8d
Security-Bulletins: TYPO3-CORE-SA-2016-014, 015, 016, 017, 018
Change-Id: Ib9776cfa6ff7556d8d8369e0cc9b57a495503ed3
Reviewed-on: https://review.typo3.org/49071


Reviewed-by: Oliver Hader <oliver.hader@typo3.org>
Tested-by: Oliver Hader <oliver.hader@typo3.org>