Escape route variable values rendered in the route preview

Prevents XSS by escaping route variable values that are interpolated into HTML rendered in the page title preview.