Somehow this plugin needs to participate in the creation of sitemaps. As it stands now the sitemap will grab the un-sanitized text of the plugin item and include it in the sitemap. Search will display this without concern for cross-site scripting (XSS) attacks.
Or, search should escape any markup it finds in text fields.
See http://ward.fed.wiki.org/better-plugs-imagined.html
Somehow this plugin needs to participate in the creation of sitemaps. As it stands now the sitemap will grab the un-sanitized text of the plugin item and include it in the sitemap. Search will display this without concern for cross-site scripting (XSS) attacks.
Or, search should escape any markup it finds in text fields.
See http://ward.fed.wiki.org/better-plugs-imagined.html