Question's title attribute is not HTML encoded.


 title: "Problems with HTML <marquee> tag"


 title: "<Canvas>  contents as data?"

I found it when on my app i saw a scrolling word due to the <marquee> tag on the title :).

In a very remote way, this could be a problem, because afaik there are no constraints on question's title submission.
I could forge a question title (300 chars max) like:

What this script <script>evil_script_that_steal_your_stackexchange_webapp_cookies();</script> does?
  • I have noticed that from long time, and I was thinking it is by-design :P (may be not), and encoding myself for following 3 chars &, ", < in order.
    – YOU
    Commented Jun 16, 2010 at 7:53
  • @S.Mark me too, just curious about it. Commented Jun 16, 2010 at 12:43
  • It seems this may have changed since 2010, as question 456815's title is now HTML-encoded: api.stackexchange.com/docs/… Commented Aug 8, 2023 at 18:20

1 Answer 1


Question titles aren't markdown, they're plain text.

Accordingly, if you're going to display them in HTML you shouldn't display them "raw".

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .