XMonad/Prompt/Shell.hs | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---

XMonad/Hooks/DynamicLog.hs | 43 30 + 13 - 0 !
1 file changed, 30 insertions(+), 13 deletions(-)

 escape dzen markup and remove xmobar tags from window titles by default.
  The issue was that window titles, such as those set by, for example a browser,
  could set the window title to display something like
  . 
     <action=malicious shell command>normal title</action>
  .
  Which could be executed by xmobar (or dzen).
  .
  This adds a ppTitleSanitize which does the above functions. This way when users
  override ppTitle, the benefits are not lost.
  .
  Thanks to Ral Benencia and Joachim Breitner for bringing this to my attention.