backlog list on https://sourcekettle.ecs.soton.ac.uk/project/manmonth/tasks/add does not escape HTML characters so a <select> in the task name broke the page!