Revision history  [back]

It seems that HTML tags in titles are swallowed instead of escaped to HTML entities.

Clarification: I do not mean allowing HTML in TITLE tags, but converting < and > into their respective HTML entities < and gt;. At the moment, if you type in Hello <World>, the <World> part will be completely swallowed and the result will be Hello. The end result, in my opinion, should be Hello <World> I do not think any real HTML should be allowed in titles.

It seems that HTML tags in titles are swallowed instead of escaped to HTML entities.

Clarification: I do not mean allowing HTML in TITLE tags, but converting < and > into their respective HTML entities < and gt;. At the moment, if you type in Hello <World>, the <World> part will be completely swallowed and the result will be Hello. The end result, in my opinion, should be Hello <World> I do not think any real HTML should be allowed in titles.

It seems that HTML tags in titles are swallowed instead of escaped to HTML entities.

Clarification: I do not mean allowing HTML in TITLE tags, but converting < and > into their respective HTML entities < and gt;. At the moment, if you type in Hello <World>, the <World> part will be completely swallowed and the result will be Hello. The end result, in my opinion, should be Hello <World> I do not think any real HTML should be allowed in titles.

It seems that HTML tags in titles are swallowed instead of escaped to HTML entities.

Clarification: I do not mean allowing HTML in TITLE tags, but converting < and > into their respective HTML entities < and gt;. At the moment, if you type in Hello <World>, the <World> part will be completely swallowed and the result will be Hello. swallowed. The end result, in my opinion, should be Hello <World> I do not think any real HTML should be allowed in titles.

It seems that HTML tags in titles are swallowed instead of escaped to HTML entities.

It seems that HTML tags in titles are swallowed instead of escaped to HTML entities.

It seems that HTML tags in titles are swallowed instead of escaped to HTML entities.aren't properly escaped.