Escape attribute values. Wtf.