Bug HTML Comment tags parsing?

[Webbstre]

I have just discovered after a message from a user that when he tried to make an arrow using these three symbols it cut off his description from that point on: <--

Obviously, this means that the <-- is parsing as a comment tag, and breaking the description. I fear it may even be a vulnerability that other code may be parsed as well, despite that I have HTML posting turned off for everyone who isn't staff on my site. Hopefully you can find the problem.

 

[Fillip H.]

I can confirm this on 1.3.8 but not on my local 1.4.0b1 development files.

There's no known vulnerabilities and it has been tested for HTML/SQL injections - are you able to get actual HTML working on your installation?

 

[Webbstre]

I haven't tested for vulnerabilities, but I thought it would be worth a look at in case it was a sign of a bigger problem. Looking forward to your update