Fix XSS vulnerability when title contains user input.
0.4.1 security release notes
Update test: error key changed, but it doesn't matter.