There's more to HTML escaping than &, <, >, and "

138 points by jamesbritt

Read the article

Discussion on Hacker News