Titles are not escaped when creating an entity (variant, version)

Steps to reproduce:

• Create a book
• Create a version or variant with the name 'V#' or 'V^'

Expected results:

• a variant with the name 'V' and title 'V#' or 'v^' is created.

Actual results:

• for 'v#' the entity is created but a CSFR warning is display due to the unescaped character # in the URL
• for 'v^' the creation doesn't work and an error 500 can be seen in the console