[fix] html in attr not escaped

[Scrum]

Summary

What kind of change does this PR introduce? (check at least one)

• Bugfix
• Feature
• Code style update
• Refactor
• Docs
• Build-related changes
• Repo settings
• Other, please describe:

If changing the UI of default theme, please provide the before/after screenshot:

Does this PR introduce a breaking change? (check one)

• Yes
• No

If yes, please describe the impact and migration path for existing applications:

The PR fulfills these requirements:

• When resolving a specific issue, it's referenced in the PR's title (e.g. fix #xxx[,#xxx], where "xxx" is the issue number)

You have tested in the following browsers: (Providing a detailed version will be better.)

• Chrome
• Firefox
• Safari
• Edge
• IE

If adding a new feature, the PR's description includes:

• A convincing reason for adding this feature
• Related documents have been updated
• Related tests have been updated

To avoid wasting your time, it's best to open a feature request issue first and wait for approval before working on it.

[vercel]

This pull request is being automatically deployed with Vercel (learn more).
To see the status of your deployment, click below or on the icon next to each commit.

🔍 Inspect: https://vercel.com/docsify-core/docsify-preview/k94r69x3j
✅ Preview: https://docsify-preview-git-fix-html-in-attr.docsify-core.vercel.app

[codesandbox-ci]

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.

Latest deployment of this branch, based on commit acbb19b:

Sandbox	Source
docsify-template	Configuration

[anikethsaha]

Lgtm

One optional thought

[sy-records]

#1404 will fix this problem

[sy-records]

Thank you for your contribution.

But there are some problems:

1. You don't need to modify package-lock.json
2. The problem with the A tag has been fixed. #1336
3. The title shouldn't have any tags, so it will be removed at #1404, not escaped.
   & " 'neither need be escaped.

[Scrum]

Thank you for your contribution.

But there are some problems:

1. You don't need to modify `package-lock.json`
2. The problem with the `A` tag has been fixed. #1336
3. The `title` shouldn't have any tags, so it will be removed at #1404, not escaped.
`& " '`neither need be escaped.

force update PR

[sy-records]

Actually, I think you can close this PR :)