Use Django 1.2 (with autoescaping) + remove now un-necessary escapes in templates. Hence, fixing #11. Openradar is now safe from any kind of XSS attacks.