Actually, Sanitizer::encodeAttribute() was broken, so my last fix didn't actually...