HTML escaping with Form valiation 1.7.0

[eluser]Josip Jelic[/eluser]
I'm running into same problems. In my opinion set_value should escape "'", '"', "<" and ">" when used in value attribute of input field or should we do that by hand every time???

What's the best practice?

Let's take this case:

Someone enters this text in text field: Muhahaha I'm "evil"

Repopulating with set_value produces this:
&lt;input type="text" value="Muhahaha i'm "evil""&gt;
which IS evil

Sry for hijacking the tread..