🕸Fergus Duniho wrote on Sat, Apr 7, 2012 01:36 AM UTC:
So there is a way of displaying HTML code short of allowing raw text. By
replacing the & in an entity with the entity for &, HTML entities can be included in
the display, and these can be used to display HTML code. Normally, a
comment will converted into characters, then converted back into HTML
entities before being stored in the database. By storing characters used by
HTML as HTML entities, "double" quotes and 'single' quotes can be
included in the comment without either messing up MySQL query strings.
Note: The & entity is still not easily displayed, and if you edit a comment, the HTML entities may convert into characters.