Double escape the AttributesString

Found in

EPiServer.Forms 4.17.0

Fixed in

EPiServer.Forms 4.20.0

Created

Sep 25, 2018

Updated

Dec 05, 2018

Area

Built-in elements

State

Closed, Fixed and tested


Description

in TextboxElementBlock

`<%: Html.Raw(Model.AttributesString) %>`

We use Raw in conjunction with : (colon). Raw unescapes, and then the colon escapes again. It's unnecessary to use them both.