escaping attributes in a different way