meta tag attributes escaped with escapeHtml instead of escapeHtmlAttr

[autowp]

headMeta view helper uses AbstractStandalone::escape method where escapeHtml is used instead of escapeHtmlAttr

Also headLink, headScript and other helpers affected.

[thexpand]

It's not that easy to just change the escapeHtml with escapeHtmlAttr, because AbstractStandalone::escape() is used not only for attributes. I think a new method escapeAttribute could be introduced and will be used accordingly.

[Ocramius]

@thexpand I don't understand your comment: why is a new method needed? We know that the meta element always has an attribute with the content.

[thexpand]

@Ocramius Because the escape method uses the escapeHtml, which is okay for HTML content, but not okay for HTML attributes. That's why I think the escapeHtmlAttr needs exposure as a new method.

[Ocramius]

Ah, I understand - needs two escapers 👍

[weierophinney]

Fixed with #164, to be released with 2.11.0.