plone/Products.PortalTransforms — pull request #1 by mitchellrj (2012-04-18 11:39:18+00:00)
Title: Fix entities inside attributes

Currently the safe_html transform will convert any escaped entities in the attributes of elements to their text values. This can result in safe_html outputting broken code in cases where it is intended to embed escaped markup inside an attribute.

e.g.

foo

Would end up as:

bar

">foo

after the first pass and

bar

">foo
after the second pass.

This patch fixes this issue by leaving entities within attributes well-alone.