Text escaping functions are not colled for multibyte charsets.
vulners.com/securityvulns/securityvulns:doc:22640