TYPO3 Core

htmlspecialchars is used twice on the title tag of the login page. If there is a '&' in $TYPO3_CONF_VARS['SYS']['sitename'], this looks very ugly (&).

How it works:
1) index.php calls $TBE_TEMPLATE->startPage('TYPO3 Login: ' . htmlspecialchars($TYPO3_CONF_VARS['SYS']['sitename']), FALSE);

2) in template.php startPage() the pagerenderer is called with $this->pageRenderer->setHtmlTag($htmlTag);

3) in class.t3lib_pagerenderer.php the final htmlspecialchars() is used in line 1494: 'TITLE' => $this->title ? str_replace('|', htmlspecialchars($this->title), $this->titleTag) : '',

So it is safe to remove the hsc() in index.php

(issue imported from #M17503)