## Lesson — Sanitize untrusted PR content by escaping closing tags

**Tags:** security, xml

Sanitize untrusted PR content by escaping closing tags to prevent attackers from breaking out of XML envelopes and injecting malicious instructions. This is critical when processing metadata from external authors.
