Needs `encodeForHTMLAttribute` instead