Do you mean that disable-output-escaping="yes" does not work for attribute values ?

Exactly. You can try Saxon, which has an extension for this, or
write your own serializer so taht you get the apostrophes as
entities in the attribute value.