Version 4.3.0

system/Output/Plugin/Expression.php

@@ -42,7 +42,7 @@ class _Expression
 		}
 		else
 		{
-			return 'htmlspecialchars( ' . \IPS\Theme::expandShortcuts( $data ) . ', ENT_QUOTES | \IPS\HTMLENTITIES, \'UTF-8\', FALSE )';
+			return 'htmlspecialchars( ' . \IPS\Theme::expandShortcuts( $data ) . ', ENT_QUOTES | ENT_DISALLOWED, \'UTF-8\', FALSE )';
 		}
 	}
 }