HTML encode attribute values by default
Fixing comments
Merge pull request #1545 from xt0rted/issue-1282

HTML encode attribute values by default