fn escape_attr(s: &str) -> String