I've read the WP codex and several tutorials about data validation and sanitation in WordPress. Now I've got this simple example code:
$title = "<script>alert('Test')</script>";
According to the tutorials and the codex this should be the output:
But on my website I get this:
Am I doing something wrong? Because the XSS isn't being executed, so the esc_html filter is working correctly.
Thanks in advance!