Widget titles need to be auto-escaped.

[Otto42]

Reference: ​http://wordpress.org/support/topic/180280

Short version: An ampersand in the title of a widget causes an output of just the ampersand instead of the html amp; code. This results in validation failure.

Solution: Widget titles and possibly text widgets need to be html escaped before output onto the page.

[jtatum]

Implementing widget_title filter

[jtatum]

The attached patch implements the widget_title filter. A quick scan of widgets.php shows that most widgets invoke this filter for the widget title, however it is not implemented by default. Figuring that titles for widgets would be similar to most other titles, this is generally used in a way similar to the blog's title, this small diff applies the same filter sets as are applied to wp_title.

[Denis-de-Bernardy]

add filter to all widget titles

[Denis-de-Bernardy]

credit should go to jtatum, I hadn't noticed his patch.

I just checked that it doesn't break the HTML added in the RSS widget's title, and things are fine.

[ryan]

(In [11208]) texturize widget titles. Props jtatum. fixes #7084