Fix #1023: HTML escaping in HtmlTextWriter

src/compiler/WebSharper.Core/Resources.fs

@@ -22,6 +22,7 @@ module WebSharper.Core.Resources
 
 open System
 open System.IO
+open System.Net
 open System.Reflection
 
 module CT = ContentTypes
@@ -43,9 +44,6 @@ type HtmlTextWriter(w: TextWriter, indentString: string) =
     let mutable tagStack = System.Collections.Generic.Stack()
     let currentAttributes = ResizeArray()
 
-    let encodeText (text: string) =
-        text // TODO dotnet: do encode
-
     new (w) = new HtmlTextWriter(w, "\t")
 
     override this.Write(c: char) = w.Write(c)
@@ -88,16 +86,18 @@ type HtmlTextWriter(w: TextWriter, indentString: string) =
         this.Write(">")
 
     member this.WriteEncodedText(text: string) =
-        this.Write(encodeText text)
-        
+        WebUtility.HtmlEncode(text, w)
+
     member this.AddAttribute(name: string, value: string) =
         currentAttributes.Add(struct (name, value))
 
     member this.WriteAttribute(name: string, value: string) =
         this.WriteAttribute(name, value, false)
 
     member this.WriteAttribute(name: string, value: string, encoded: bool) =
-        this.Write(" {0}=\"{1}\"", name, encodeText value)
+        this.Write(" {0}=\"", name)
+        WebUtility.HtmlEncode(value, w)
+        this.Write("\"")
 
 #endif