"Just sent a note to David. I think you're right about the need to encode < and &. Thanks for the report." - Dave Winer