[security] - XSS - Encode special caracters before including content on the page

[chrisguindon]

I did notice last week that some characters might be double encoded in a news item.

I am creating this issue here but I think the plugin is doing the right thing.

Let's investigate: I have a feeling that the fix should be done in the API and not in this plugin as I expect the plugin to encode all special characters.

[chrisguindon]

I made some changes to the API for this but we still need to make an update to the plugin.

The plugin must encode special characters before adding the content to the page.

Encoding should be applied directly before user-controllable data is written to a page because the context you're writing into determines what kind of encoding you need to use.