Fix forceSimpleAmpersand config implementation

Run ampersand replacement after the htmlEncodeAttr, otherwise the results are overwritten (ckeditor/ckeditor4#965)
drupal-ckeditor-libraries-group · Sep 14, 2018 · febd1d6 · febd1d6
1 parent 7632f5c
commit febd1d6
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/plugin.js b/plugin.js
@@ -179,9 +179,11 @@ CKEDITOR.htmlWriter = CKEDITOR.tools.createClass( {
 		attribute: function( attName, attValue ) {
 
 			if ( typeof attValue == 'string' ) {
-				this.forceSimpleAmpersand && ( attValue = attValue.replace( /&amp;/g, '&' ) );
 				// Browsers don't always escape special character in attribute values. (https://dev.ckeditor.com/ticket/4683, https://dev.ckeditor.com/ticket/4719).
 				attValue = CKEDITOR.tools.htmlEncodeAttr( attValue );
+
+				// Run ampersand replacement after the  htmlEncodeAttr, otherwise the results are overwritten (https://github.com/ckeditor/ckeditor-dev/issues/965)
+				this.forceSimpleAmpersand && ( attValue = attValue.replace( /&amp;/g, '&' ) );
 			}
 
 			this._.output.push( ' ', attName, '="', attValue, '"' );