Simpler html attribute escaping