ucla/mwf — Issue #95: Site Menu Decorator should HTML escape URL
Author: Trott
Created: 2012-02-05 16:10:55+00:00
State: open

If a user passes a valid URL like `/foo?a=1&b=2` to the Site Menu Decorator as an item, the resulting markup is invalid because the ampersand is not escaped in the `href` attribute.