protected void serializeAttribute(TagNode tagNode,Writer writer,String attName,String attValue) throws IOException {
  if (!isForbiddenAttribute(tagNode,attName,attValue)) {
    writer.write(" " + attName + "=\""+ escapeXml(attValue)+ "\"");
  }
}

protected void serializeAttribute ( TagNode tagNode , Writer writer , String attName , String attValue ) throws IOException { if ( ! isForbiddenAttribute ( tagNode , attName , attValue ) ) { writer . write ( " " + attName + "=\"" + escapeXml ( attValue ) + "\"" ) ; } }
this allows overriding to eliminate forbidden attributes ( for example javascript attributes onclick , onblur , etc . )
