Message

foo claims to be escaped, but isn't

Explanation

Content claims to be escaped, but it isn't.

Solution

Escape all tags and entities. < signs should become "&lt;"; > signs should become "&gt;"; & signs should become "&amp;".

Not clear? Disagree?

You might be able to find help in one of these fine resources.