Revision history [back]

It seems that HTML tags in titles aren't properly escaped.

It seems that HTML tags in titles aren't properly escaped.are swallowed instead of escaped to HTML entities.

It seems that HTML tags in titles are swallowed instead of escaped to HTML entities.

It seems that HTML tags in titles are swallowed instead of escaped to HTML entities.

It seems that HTML tags in titles are swallowed instead of escaped to HTML entities.

Clarification: I do not mean allowing HTML in TITLE tags, but converting < and > into their respective HTML entities < and gt;. At the moment, if you type in Hello <World>, the <World> part will be completely swallowed. swallowed and the result will be Hello. The end result, in my opinion, should be Hello <World> I do not think any real HTML should be allowed in titles.

It seems that HTML tags in titles are swallowed instead of escaped to HTML entities.

Clarification: I do not mean allowing HTML in TITLE tags, but converting < and > into their respective HTML entities < and gt;. At the moment, if you type in Hello <World>, the <World> part will be completely swallowed and the result will be Hello. The end result, in my opinion, should be Hello <World> I do not think any real HTML should be allowed in titles.

It seems that HTML tags in titles are swallowed instead of escaped to HTML entities.

Clarification: I do not mean allowing HTML in TITLE tags, but converting < and > into their respective HTML entities < and gt;. At the moment, if you type in Hello <World>, the <World> part will be completely swallowed and the result will be Hello. The end result, in my opinion, should be Hello <World> I do not think any real HTML should be allowed in titles.

It seems that HTML tags in titles are swallowed instead of escaped to HTML entities.

Clarification: I do not mean allowing HTML in TITLE tags, but converting < and > into their respective HTML entities < and gt;. At the moment, if you type in Hello <World>, the <World> part will be completely swallowed and the result will be Hello. The end result, in my opinion, should be Hello <World> I do not think any real HTML should be allowed in titles.