/*\r
-Copyright (c) 2003-2010, CKSource - Frederico Knabben. All rights reserved.\r
+Copyright (c) 2003-2011, CKSource - Frederico Knabben. All rights reserved.\r
For licensing, see LICENSE.html or http://ckeditor.com/license\r
*/\r
\r
*/\r
attribute : function( attName, attValue )\r
{\r
- // Browsers don't always escape quote in attribute values. (#4683)\r
+ // Browsers don't always escape special character in attribute values. (#4683, #4719).\r
if ( typeof attValue == 'string' )\r
- attValue = attValue.replace( /"/g, '"' );\r
+ attValue = CKEDITOR.tools.htmlEncodeAttr( attValue );\r
\r
this._.output.push( ' ', attName, '="', attValue, '"' );\r
},\r