Just wanted to bump this because it's still an issue and I've not seen a single dev/mod response on anything along these lines... It's really irritating because it's a very old bug and clearly just a matter of proper String sanitation. (A.K.A., something any decent programmer should be able to fix in less than five minutes.) While I know there are other more pressing issues, there's no reason really, really old and simple-to-fix bugs shouldn't be taken care of, too.