I am working on a new preference, for advanced users only, that will disable the escaping of URIs in attribute values. This is mostly for PHP authors so the PHP chunks they put in attributes are not bork-borked.

  • The good: <img src="<?php getImage() ?>"> will remain unmodified
  • The bad: http://www.example.com/foo<bar will also remain unmodified but should be turned into http://www.example.com/foo%3Cbar ...