code: public static String escapeAttribute (String value)
      {
          for (int ii = 0; ii < ATTR_ESCAPES.length; ++ii) {
              value = value.replace(ATTR_ESCAPES[ii][0], ATTR_ESCAPES[ii][1]);
          }
          return value;
      }
docs: Escapes user or deployment values that we need to put into an html attribute.