Issue #1860594 by penyaskito, damiankloip, xjm, alexpott, sun: Ensure that randomString() always returns a character that needs to be escaped for HTML.
Issue #2336355 by alexpott, Cottser: Fixed Refactor Attribute rendering so that class= is not printed.