HTML attributes should be escaped
Merge pull request #23 from zzzzBov/patch-1

HTML attributes should be escaped