*/\r
attribute : function( attName, attValue )\r
{\r
+ // Browsers don't always escape special character in attribute values. (#4683, #4719).\r
+ if ( typeof attValue == 'string' )\r
+ attValue = CKEDITOR.tools.htmlEncodeAttr( attValue );\r
+\r
this._.output.push( ' ', attName, '="', attValue, '"' );\r
},\r
\r