TOBAGO-1958: CommandRenderer may not escape links correctly

(cherry picked from commit 263a291828797cd0867a5225072fdc18980fb1f5)
diff --git a/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/renderkit/renderer/CommandRendererBase.java b/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/renderkit/renderer/CommandRendererBase.java
index e173245..560930a 100644
--- a/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/renderkit/renderer/CommandRendererBase.java
+++ b/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/renderkit/renderer/CommandRendererBase.java
@@ -88,8 +88,8 @@
     if (!disabled) {
       if (anchor) {
         final String href = RenderUtils.generateUrl(facesContext, command);
-        writer.writeAttribute(HtmlAttributes.HREF, href, false);
-        writer.writeAttribute(HtmlAttributes.TARGET, target, false);
+        writer.writeAttribute(HtmlAttributes.HREF, href, true);
+        writer.writeAttribute(HtmlAttributes.TARGET, target, true);
 
         command.setOmit(true);
       }