The Incutio XML-RPC Library does not strip invalid XML characters — at Initial Version
|Reported by:||tszming||Owned by:|
Not sure how to contact the library' author, but as I experienced this issue when using with the wordpress's class-IXR.php, so I report here (http://scripts.incutio.com/xmlrpc/)
See the attached script to reproduce the problem: There is a BEL (07) between the character A and B, and the client send the invalid character to the server.
Probably need to filter out the string like this ticket: http://core.trac.wordpress.org/ticket/19998