Comment 8 for bug 740142

on a side note - if you test it in firefox4 or chrome 10 - the unescaped content makes it into the page but you won't see an alert 1 / inputbox where the shouldn't be (for the example(s) I put here).