Escape templates

[darrenbelding]

Templates currently use the /* @escapeNotVerified */ annotation. As of 2.2, these annotations should be removed and the correct escape strategy used

Expected outcome:

• Module passes Magento's Xss Unsafe Output static test

Actual outcome:

• Module fails Magento's Xss Unsafe Output static test

[diazwatson]

@darrenbelding could you submit a PR with the suggested changes?