X-Git-Url: https://jasonwoof.com/gitweb/?a=blobdiff_plain;f=_source%2Fcore%2Fhtmlparser%2Fbasicwriter.js;h=6334e8fe2181f4747078e98e0808a34c416d6c8c;hb=fb481ba0a7d298e3e7b9034fcb9f2afdc6e8e796;hp=5d678912fbae134827cb2e51c56f4de9f06b90bf;hpb=c6e377a02b54abc07129d72b632763c727476a15;p=ckeditor.git diff --git a/_source/core/htmlparser/basicwriter.js b/_source/core/htmlparser/basicwriter.js index 5d67891..6334e8f 100644 --- a/_source/core/htmlparser/basicwriter.js +++ b/_source/core/htmlparser/basicwriter.js @@ -1,5 +1,5 @@ /* -Copyright (c) 2003-2010, CKSource - Frederico Knabben. All rights reserved. +Copyright (c) 2003-2012, CKSource - Frederico Knabben. All rights reserved. For licensing, see LICENSE.html or http://ckeditor.com/license */ @@ -60,9 +60,9 @@ CKEDITOR.htmlParser.basicWriter = CKEDITOR.tools.createClass( */ attribute : function( attName, attValue ) { - // Browsers don't always escape quote in attribute values. (#4683) + // Browsers don't always escape special character in attribute values. (#4683, #4719). if ( typeof attValue == 'string' ) - attValue = attValue.replace( /"/g, '"' ); + attValue = CKEDITOR.tools.htmlEncodeAttr( attValue ); this._.output.push( ' ', attName, '="', attValue, '"' ); },