The code that I have is:
<input type="text" name="some_name" value="<?php echo CHtml::encode($str); ?>" />
$str is the input data. 'CHtml::encode()' is Yii's way of encoding special characters into HTML entities. Can this be bypassed?
I know it can be broken if I do not put those double quotes around the input. But I do not think just by putting double quotes around will make it unbreakable.