A critique of cgi.escape

[Lawrence D'Oliveiro]

In message <mailman.674.1159276196.10491.python-list at python.org>, Fredrik
Lundh wrote:

> Lawrence D'Oliveiro wrote:
> 
>>> (cgi.escape(s, True) is slower than cgi.escape(s), for reasons that are
>>> obvious for anyone who's looked at the code).
>>
>> What you're doing is adding to the reasons why the existing cgi.escape
>> function is stupidly designed and implemented. The True case is by far
>> the most common
> 
> really?  most HTML attributes cannot even contain things that would need
> to be escaped...

Are you really serious about that?