cakephp/docs — pull request #211 by yandod (2012-03-09 04:51:30+00:00)
Title: We should escape least title and body when showing as text.

As long as framework doesn't escape automatically, we should escape text.
This document might be able to promote XSS vulnerability.