Thread:Extension talk:CanonURL/Patch: Escape output

As demonstrated in this example, the complete lack of escaping in this extension is causing two problems:
 * Titles that contain special characters will not be escaped, as such the url outputted in the  will not lead to the real article but a "Not found page" or "Bad title" error.
 * Title that contain html script characters will result in an arbitrary html injection vector.

I've filed https://github.com/Abhi-M/CanonURL/issues/1 to track this issue. I'll provide a patch shortly.