katzgrau/wordpress-github — pull request #8 by SimonGreenhill (2011-11-29 00:00:32+00:00)
Title: HTML entities need to be escaped in views/admin.php

The HTML entities in the user input in views/admin.php need to be escaped. If they're not, then we run the risk of the page breaking if the user enters something like

.. in one of the input boxes. The worst case scenario is a potential XSS attack.