Protected source does not protect attributes

[Wiktor Walc]

With configuration setting for PHP code:

config.protectedSource.push( /<\?[\s\S]*?\?>/g );

attributes are not protected

<input name="error" type="text" value="<?=$error?>" />

Note that apart from being able to switch from wysiwyg mode and back without losing content, it should work also in the "Text Field Properties" dialog when viewing the value.

Right now the result is:

value="<!--{cke_protected}%3C%3F%3D%24var%3F%3E-->"

[Wiktor Walc]

Related ticket: #4475. I'm not sure if the patch included there targets this issue as well.

[Wiktor Walc]

Since we're already fixing issues with protected source in #4475 and #4880 it might be worth to look also at this case.

[Garry Yao]

This becomes a wontfix as stated by this comment.