event handlers are executed in IE and Safari

[Alfonso Martínez de Lizarrondo]

load this in source mode:

<a href="#" onclick="alert(1)">click me</a>

IE and Safari will show the alert when you click the link, meaning that any event handler is being executed while in design view.

[Frederico Caldeira Knabben]

The fix is correct, but there is a performance impact on it. We're forcing it making two loops through the attributes, even if we don't want to sort them.

This part of the code must be blazing fast. We actually don't use attribute sorting when loading data into the editor. Even if we'll have a bit more core because of it, the performance benefits must be considered. So, instead of changing that "if" condition, we should instead have the "if ( filter )" case in the else block, inside the "for" loop at line 167.

[Artur Formella]

Fixed with [3466].