id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc
6759	Protected source does not protect attributes	Wiktor Walc		"With configuration setting for PHP code:

{{{
config.protectedSource.push( /<\?[\s\S]*?\?>/g );
}}}

attributes are not protected

{{{
<input name=""error"" type=""text"" value=""<?=$error?>"" />
}}}

Note that apart from being able to switch from wysiwyg mode and back without losing content, it should work also in the ""Text Field Properties"" dialog when viewing the value.

Right now the result is:
{{{
value=""&lt;!--{cke_protected}%3C%3F%3D%24var%3F%3E--&gt;""
}}}
"	Bug	closed	Normal		General	3.0	wontfix