escaping attributes within color form field input