# attr-unsafe-chars

> Disallows unsafe characters in attribute values to prevent rendering and security issues.

Attribute value cannot use unsafe chars.

regexp: `/[\u0000-\u0009\u000b\u000c\u000e-\u001f\u007f-\u009f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/`

Level: Warning

## Config value

[Section titled “Config value”](#config-value)

* `true`: enable rule
* `false`: disable rule

### The following patterns are **not** considered rule violations

[Section titled “The following patterns are not considered rule violations”](#the-following-patterns-are-not-considered-rule-violations)

```html
<li>
  <a href="https://vimeo.com/album/1951235/video/56931059">Sud Web 2012</a>
</li>
```

### The following pattern is considered a rule violation:

[Section titled “The following pattern is considered a rule violation:”](#the-following-pattern-is-considered-a-rule-violation)

```html
<li>
  <a href="https://vimeo.com/album/1951235/video/56931059\u0009"
    >Sud Web 2012</a
  >
</li>
```

Tip

The unsafe chars is in the tail of the href attribute.