title: Does knockout 'attr' always assume input require escape, is it possible to turn it off?
body: <p>If one were to bind <code>attr: { href: url }</code>, does it always escape url according to rfc2396?</p>
  
  <p>I have recently encounter issue where <code>&amp;amp;</code> in json response is converted to <code>&amp;amp;amp;</code> by knockout, I am guessing knockout has no way of knowing it's double-encoded (html then json), and thus convert any <code>&amp;</code> into entities.</p>
  
  <p>Should we always give raw url to <code>attr</code> binding, but not for <code>html</code> binding? what's the rule of thumb here?</p>