question: protected void serializeAttribute ( TagNode tagNode , Writer writer , String attName , String attValue ) throws IOException { if ( ! isForbiddenAttribute ( tagNode , attName , attValue ) ) { writer . write ( " " + attName + "=\"" + escapeXml ( attValue ) + "\"" ) ; } }
target:  This allows overriding to eliminate forbidden attributes (for example javascript attributes onclick, onblur, etc. )