openid/php-openid — comment on commit 8d53dfe542f321da3a6e6d6e626923d575ed91d2
File:  line 0
By benholland:

This change broke our OpenID module - I think by decoding characters that had deliberately been urlencoded for insertion into parameters of the return_to URL. In fact after finding this change, it seems to me a better change would be to wrap both the $name and $value with htmlentities() before inserting them in to the tags. Before I go ahead and submit such a change can anyone suggest why the above change is required? Thanks.