[shkkmo]

While it does indicate that their QA efforts are underwhelming, it also shows that they at least know the importance of escaping strings...or are using a tool that does some of that for them.

[crtasm]

That's a very good point.