Same here. Should have been a encodeForHTMLAttribute