code: function attribToHtml(str) {
      return str.replace(pr_amp, '&amp;')
          .replace(pr_lt, '&lt;')
          .replace(pr_gt, '&gt;')
          .replace(pr_quot, '&quot;');
    }
docs: like textToHtml but escapes double quotes to be attribute safe.