Index: stripogram/html2safehtml.py
===================================================================
--- stripogram/html2safehtml.py (revision 42)
+++ stripogram/html2safehtml.py (revision 43)
@@ -8,7 +8,9 @@
from HTMLParser import HTMLParser,HTMLParseError,piclose, charref, entityref
from string import lower,find
+from xml.sax.saxutils import quoteattr
+
class HTML2SafeHTML(HTMLParser):
can_close = ['li','p','dd','dt','option']
@@ -52,7 +54,7 @@
self.result += ' ' + k
else:
if lower(k[0:2]) != 'on' and lower(v[0:10]) != 'javascript':
- self.result += ' %s="%s"' % (k, v)
+ self.result += ' %s=%s' % (k, quoteattr(v))
if tag not in self.never_close:
self.openTags.append(tag)