Message
foo claims to be escaped, but isn't
Explanation
Content claims to be escaped, but it isn't.
Solution
Escape all tags and entities. < signs should become "<"; > signs should become ">"; & signs should become "&".
Not clear? Disagree?
You might be able to find help in one of these fine resources.
