=== modified file 'launchpadBugs/HTMLOperations.py'
--- launchpadBugs/HTMLOperations.py	2007-03-23 17:28:28 +0000
+++ launchpadBugs/HTMLOperations.py	2007-03-26 14:02:10 +0000
@@ -298,22 +298,22 @@
         # parse out title
         m = re.search('<input .*id="field.title".*value=["\']([^"\']*)["\']', text)
         assert m
-        self.title = m.group(1)
+        self.title = sanitize_html(m.group(1))
  
         # parse out description
         m = re.search('<textarea .*id="field.description"[^>]*>((.|\n)*)</textarea>', text)
         assert m
-        self.description = m.group(1)
+        self.description = sanitize_html(m.group(1))
  
         # parse out tags
         m = re.search('<input .*id="field.tags".*value="([^"]*)"', text)
         assert m
-        self.tags = m.group(1).split()
+        self.tags = sanitize_html(m.group(1)).split()
  
         # parse out nickname
         m = re.search('<input .*id="field.name".*value="([^"]*)"', text)
         assert m
-        self.nickname = m.group(1)
+        self.nickname = sanitize_html(m.group(1))
  
     def set_metadata(self):
         '''Write back title, description, tags, and nickname attributes.'''