Ticket #9205: 9205.patch

_source/plugins/htmldataprocessor/plugin.js

@@ -437 +437 @@
 
                 // Different protection pattern is used for those that
                 // live in attributes to avoid from being HTML encoded.
-                return data.replace( /(['"]).*?\1/g, function ( match )
+                return data.replace( /<[^>]*(['"]).*?\1*>/g, function ( match )
                 {
                         return match.replace( /<!--\{cke_protected\}([\s\S]+?)-->/g, function( match, data )
                         {