HTML in a bug summary does not get escaped when you view the details of a bug without being logged in. As another example, see my <strike> ended by <strike> bug in the javadiff project.
Log in to post a comment.
