_html attributes html_safe in format_attribute - fixes #6759