export function add_attribute(name, value, boolean) {
	if (value == null || (boolean && !value)) return '';
	const assignment = (boolean && value === true) ? '' : `="${escape_attribute_value(value.toString())}"`;
	return ` ${name}${assignment}`;
}
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.