Index: stripogram/html2safehtml.py =================================================================== --- stripogram/html2safehtml.py (revision 42) +++ stripogram/html2safehtml.py (revision 43) @@ -8,7 +8,9 @@ from HTMLParser import HTMLParser,HTMLParseError,piclose, charref, entityref from string import lower,find +from xml.sax.saxutils import quoteattr + class HTML2SafeHTML(HTMLParser): can_close = ['li','p','dd','dt','option'] @@ -52,7 +54,7 @@ self.result += ' ' + k else: if lower(k[0:2]) != 'on' and lower(v[0:10]) != 'javascript': - self.result += ' %s="%s"' % (k, v) + self.result += ' %s=%s' % (k, quoteattr(v)) if tag not in self.never_close: self.openTags.append(tag)