@calfzhou why do we need to escape  `SITENAME`?

The issue is with article summary, when it is auto generated. `title` is also understandable, user may put quotes and other stuff in it.

But why `SITENAME`, shouldn't it be the responsibility of user to make sure he escapes the variable properly?

I tried putting stuff like `&` and double quotes in `SITENAME`. The `|e` directive didn't work.

I suggest we escape `title` and `summary` everywhere it is used but keep `SITENAME` out of it.

Let me know what you think.