@Preston-Crary 

Is the escape really needed on the href attribute? It's already escaped in the taglib.