X-Git-Url: https://jasonwoof.com/gitweb/?a=blobdiff_plain;f=_source%2Fcore%2Fhtmlparser%2Fbasicwriter.js;h=010ae74e6b76ece4b1096d45de33d94feef8d910;hb=48b1db88210b4160dce439c6e3e32e14af8c106b;hp=5d678912fbae134827cb2e51c56f4de9f06b90bf;hpb=c6e377a02b54abc07129d72b632763c727476a15;p=ckeditor.git diff --git a/_source/core/htmlparser/basicwriter.js b/_source/core/htmlparser/basicwriter.js index 5d67891..010ae74 100644 --- a/_source/core/htmlparser/basicwriter.js +++ b/_source/core/htmlparser/basicwriter.js @@ -1,5 +1,5 @@ /* -Copyright (c) 2003-2010, CKSource - Frederico Knabben. All rights reserved. +Copyright (c) 2003-2011, CKSource - Frederico Knabben. All rights reserved. For licensing, see LICENSE.html or http://ckeditor.com/license */ @@ -60,9 +60,9 @@ CKEDITOR.htmlParser.basicWriter = CKEDITOR.tools.createClass( */ attribute : function( attName, attValue ) { - // Browsers don't always escape quote in attribute values. (#4683) + // Browsers don't always escape special character in attribute values. (#4683, #4719). if ( typeof attValue == 'string' ) - attValue = attValue.replace( /"/g, '"' ); + attValue = CKEDITOR.tools.htmlEncodeAttr( attValue ); this._.output.push( ' ', attName, '="', attValue, '"' ); },