id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
6514	urlize does not escape url correctly	Daniel Pope <dan@…>	nobody	"urlize leaves unencoded characters in {{{href}}} attributes. In particular, & must be escaped as {{{&amp;}}} for valid XHTML. I believe unescaped '&'s are also invalid in HTML but HTML parsers are forgiving about this.

From the regression tests, {{{http://example.com/x=&y=}}} is converted to {{{<a href=""http://example.com/x=&y="" rel=""nofollow"">http://example.com/x=&amp;y=</a>}}}.

It should be converted to {{{<a href=""http://example.com/x=&amp;y="" rel=""nofollow"">http://example.com/x=&amp;y=</a>}}}."		closed	Template system	dev		fixed			Ready for checkin	1	0	0	0	0	0