This is unsafe IMO. Shouldn't you escape it? Also, please provide a test, since this is a fix