I would like to propose a small clarification to the XSS Prevention Cheat Sheet, specifically regarding the section on HTML Attribute Encoding. Encoding Type: HTML Attribute Encoding Encoding ...