Added tests to catch forbidden characters inside attribute strings.