Function escape_attr 

pub fn escape_attr<'a, S: Into<Cow<'a, str>>>(input: S) -> Cow<'a, str>

Escapes characters unsafe within an HTML attribute value (<, >, &, "), returning the input unchanged (borrowed) when no escaping is needed.